Money laundering can involve dividing large sums into smaller transactions to evade detection and AML controls. This is known as structuring money laundering; smurfing often refers to similar activity spread across multiple transactions, accounts or people.
Structuring means arranging transactions to evade reporting or recordkeeping requirements. Smurfing usually involves splitting funds into many smaller transactions, often through multiple participants. The terms overlap, and smurfing AML investigations may examine many of the same transaction patterns associated with structuring.
The risk is significant. More than 1.4 million suspicious activity reports were filed in the US in 2023, underscoring the scale of activity AML teams assess. Transaction monitoring, customer due diligence and network analysis help reveal suspicious patterns, including potential structuring red flags.
In this guide, you will learn how structuring and smurfing work, how they differ, the structuring red flags AML teams monitor and how customer context and transaction patterns support effective investigations.
Binderr AML Compliance Software: Build the Customer Risk Context
Detecting unusual transaction patterns is only part of an AML investigation. Teams must also understand who is involved, the risks they present and whether the activity fits their profile.
See how Binderr supports AML compliance;
- KYC identity verification with document, biometric and liveness checks
- KYB business verification using global registry data
- AML screening across sanctions, PEPs, watchlists and adverse media
- Ongoing AML monitoring with alerts for risk changes
- Dynamic Risk Assessment using KYC, KYB and AML data
- UBO identification and ownership mapping for complex business structures
What Is Structuring in Money Laundering?
Structuring in money laundering is the deliberate splitting or arranging of transactions to evade reporting, recordkeeping or AML controls. It may involve repeated deposits or withdrawals across multiple accounts, branches, days, third parties or monetary instruments. These patterns are central to many structuring money laundering investigations.
However, transactions below a reporting threshold are not automatically suspicious; AML teams must consider intent, customer history, source of funds and the wider pattern. The US $10,000 CTR threshold is only a jurisdiction-specific example. A transaction close to a threshold may be one of several structuring red flags, but it does not establish suspicious activity on its own.
Start Your First Compliance Check
Where Does Structuring Fit Into the Money Laundering Process?
Structuring is most commonly associated with the placement stage of money laundering: Placement → Layering → Integration.
Criminals may split large amounts into smaller deposits or use monetary instruments to introduce funds into the financial system with less attention. The funds may then move through multiple accounts during layering before appearing legitimate during integration. This is why structuring money laundering can involve both initial deposits and later movements through connected accounts.
The FFIEC and FATF identify breaking large sums into smaller amounts as a placement technique. These stages can overlap, and structuring may support multiple laundering methods.
Why KYC and CDD Matter When Investigating Structuring
KYC, CDD and transaction monitoring help compliance teams determine whether unusual activity is legitimate or potentially suspicious. Transaction monitoring shows what happened, while KYC and CDD provide context.
Investigators can compare activity with the customer’s occupation, income, business model, ownership structure, counterparties and risk profile. For example, frequent cash deposits may be normal for a retail business but unusual for a salaried employee.
Combining customer information, source-of-funds data and transaction history helps AML teams identify suspicious patterns without treating every unusual transaction as proof of money laundering. It also helps distinguish legitimate activity from potential structuring money laundering and gives investigators a stronger basis for evaluating structuring red flags.
Start KYC Verification for Free
When Structuring Indicators May Trigger Enhanced Due Diligence
Structuring indicators do not automatically prove money laundering. However, suspicious or unexplained transaction patterns may justify Enhanced Due Diligence (EDD), depending on the jurisdiction, the firm's AML policies and the customer's overall risk profile.
AML teams may verify the source of funds, establish source of wealth where relevant, request explanations for unusual transactions, review connected accounts and entities, confirm beneficial ownership, assess counterparties and examine historical activity. They may also apply enhanced ongoing monitoring.
For example, Australian AML guidance may require enhanced customer due diligence when structuring is reasonably suspected and the relationship continues. Requirements vary by jurisdiction.
Where structuring red flags overlap with multiple-account activity, third-party transfers or rapid movement of funds, firms may also consider whether the pattern is relevant to smurfing AML controls. The presence of these indicators should support further investigation rather than an automatic conclusion that structuring money laundering has occurred.
Get Alerts When Risk Changes
What Is Smurfing in Money Laundering?
Smurfing in money laundering involves splitting a larger sum into smaller transactions, often across multiple people, accounts, branches or payment channels, to make the funds harder to detect. The participants may be called “smurfs.” These distributed patterns are a key focus of smurfing AML reviews.
Smurfing is often used interchangeably with structuring, although structuring is the broader practice of arranging transactions to evade AML controls. Individual transactions do not prove money laundering without considering the wider context. For this reason, smurfing AML analysis should consider transaction links, customer behaviour, counterparties and the purpose of the activity.
Structuring vs Smurfing: What Is the Difference?
Structuring and smurfing are related money laundering typologies, though definitions vary by jurisdiction. Structuring involves dividing or arranging transactions to avoid AML controls or reporting requirements. In structuring money laundering cases, the activity may involve one customer or a wider network of connected accounts.
Smurfing often involves multiple people, accounts, branches or payment channels. AML teams assess the broader pattern and customer profile, not just one transaction. Potential structuring red flags may include repeated threshold-adjacent activity, linked transactions across locations and unusual third-party involvement, but each indicator requires contextual review.
Structuring | Smurfing | |
Meaning | Arranging or splitting transactions to evade reporting or AML controls | Structured activity involving numerous smaller transactions, often through multiple participants or accounts |
Number of people | Can involve one or multiple people | Often associated with multiple participants |
Number of accounts | One or multiple | Often multiple |
Purpose | Avoid detection, reporting or recordkeeping requirements | Same general objective |
Typical pattern | Series of deliberately divided transactions | Distributed series of smaller transactions |
Relationship | Broader concept | Often treated as a form of, or synonym for, structuring |
All smurfing can involve structuring behaviour, but “smurfing” and “structuring” are not consistently distinguished by regulators. Context matters.
How Structuring and Smurfing Can Work
Structuring and smurfing involve dividing larger amounts into smaller transactions to make suspicious activity less visible and harder for AML teams to detect.
These money laundering techniques may use multiple accounts, people, branches, locations or payment channels, making transaction monitoring and pattern analysis essential when assessing potential structuring money laundering activity.
Funds are divided - A larger amount of money is divided into smaller transactions so individual deposits, withdrawals, transfers or purchases appear less unusual and are less likely to trigger AML controls. Transactions may be similar, rounded or close to a reporting threshold, but being below a threshold is not automatically suspicious.
Transactions are distributed - The smaller transactions may be spread across different accounts, people, locations, payment methods or days, making the activity harder to detect individually. AML teams may review linked customers, common beneficiaries, shared identifiers, unusual branch usage, third-party deposits and transaction timing to identify wider structuring or smurfing patterns.
Funds enter or move through the financial system - The transactions may appear routine individually, but the combined pattern could conflict with the customer's profile, business activity or expected source of funds. Transaction monitoring can aggregate activity across accounts, channels and time periods to identify unusual deposits, rapid transfers, threshold-adjacent activity and other potential AML red flags.
Funds may later be consolidated or moved - After entering the financial system, funds may move between accounts, third parties, monetary instruments or payment channels. This can create further layering and obscure their origin, ownership or purpose. Investigators may review counterparties, transaction speed and source-of-funds information to determine whether enhanced due diligence or SAR/STR consideration is warranted.
Simplify AML Investigation and Due Diligence Workflows with Binderr
Structuring investigations can become complicated when teams must verify customers, investigate businesses, understand ownership and reassess risk across separate systems.
See how Binderr simplifies the compliance process;
- Verify individuals through KYC with document, biometric and liveness checks
- Verify businesses through KYB using global registry data
- Identify directors, shareholders and UBOs
- Map ownership structures across complex corporate relationships
- Screen individuals and entities against sanctions, PEPs, watchlists and adverse media
- Assign dynamic risk scores using customer and business data
Examples of Structuring and Smurfing
Structuring and smurfing can take several forms, often involving smaller transactions that appear routine when viewed separately but reveal a suspicious pattern when analysed together.
The following examples highlight common AML red flags, including repeated cash deposits, multiple accounts or branches, third-party transactions and activity designed to avoid reporting thresholds. These are also important considerations when developing a structuring money laundering risk assessment.
Example 1: Repeated smaller cash deposits
A customer who normally receives electronic payments suddenly begins making frequent cash deposits over several days, with each deposit remaining just below an applicable reporting or review threshold. This is an example of potential structuring because the transactions may have been deliberately divided to avoid a reporting or AML control. The pattern may warrant investigation when it conflicts with the customer’s known occupation, business model or expected activity. AML teams should review the deposits collectively, assess the source of funds and avoid treating threshold-adjacent transactions as proof of money laundering without additional context.
Example 2: Multiple branches
A customer or group of connected individuals makes related cash deposits at several branches within a short period, even though using different locations appears unnecessary. This may be a structuring example because distributing activity across branches can make the overall transaction pattern harder to identify. Compliance teams should compare branch activity, timing, account ownership, customer relationships and transaction purpose before deciding whether enhanced review is appropriate.
Example 3: Multiple individuals
Several people conduct similar deposits, withdrawals or transfers that ultimately benefit the same account, business or recipient. This is a potential smurfing example and a relevant smurfing AML indicator because the activity is distributed among multiple individuals who may be acting together to move or divide funds. The individuals may be connected through shared contact details, devices, addresses, beneficiaries or transaction timing. However, legitimate explanations may exist, such as family support or business collections, so investigators should establish the relationship between the parties and determine whether the activity matches their customer profiles.
Example 4: Unusual third-party activity
An account that previously showed routine activity begins receiving numerous deposits from unrelated individuals, followed by rapid transfers to another account or withdrawal of cash. This may be a smurfing example if multiple people are being used to deposit or transfer funds, and it may also involve structuring if the transactions have been deliberately divided to avoid reporting or AML controls. The pattern can also raise concerns about money muling or the movement of funds on behalf of others. AML teams should examine the sender relationships, payment descriptions, account history, source of funds and whether the account holder can reasonably explain the activity.
What Is Cuckoo Smurfing?
Cuckoo smurfing is a money laundering method in which criminals place illicit funds into accounts belonging to customers expecting legitimate payments. These account holders may be unaware that criminal proceeds have replaced or mixed with their expected funds.
Unlike ordinary smurfing, cuckoo smurfing exploits legitimate accounts and payment flows, often across borders, to disguise criminal money.
Smurfing ≠ cuckoo smurfing. Cuckoo smurfing is a distinct typology involving legitimate account holders and payment or remittance networks.
Structuring and Smurfing Red Flags AML Teams Should Monitor
Recognising structuring and smurfing red flags helps AML teams identify suspicious transaction patterns before they become more difficult to investigate.
Look beyond individual transactions and assess activity across accounts, channels, locations, time periods and customer profiles. A strong review of structuring red flags should also consider whether the activity is consistent with the customer's expected behaviour and source of funds.
Transaction-pattern red flags
Transaction-pattern red flags include repeated threshold-adjacent payments, related deposits across branches or accounts, sudden cash activity, multiple third-party deposits, unusual monetary instruments, rapid transfers, and behaviour inconsistent with customer history. These patterns may indicate structuring or smurfing but require contextual review.
Customer-behaviour red flags
Customer-behaviour red flags include activity inconsistent with a customer's profile, unexplained transaction increases, reluctance to provide information, distant branch use, third-party transactions and sudden behavioural changes. These signs do not prove money laundering but may justify enhanced due diligence and closer monitoring.
Network-level red flags
Network-level red flags may include multiple accounts sending funds to the same beneficiary, unrelated customers sharing identifiers or transaction patterns, repeated transfers between connected entities and coordinated activity within short timeframes. These patterns may suggest smurfing or money-mule activity but require context.
The FFIEC identifies multiple-branch activity, groups entering branches together and threshold-adjacent transactions as potential structuring indicators. However, red flags are not proof of criminal conduct and should be assessed alongside customer history, expected activity, transaction purpose and source of funds.
Combine AML Screening With Dynamic Customer Risk Assessment Using Binderr
A transaction pattern may warrant closer review when combined with other risk indicators, such as sanctions exposure, PEP status, adverse media or elevated-risk ownership.
See how Binderr adds wider AML risk context;
- Sanctions screening across global databases
- PEP screening for politically exposed persons
- Watchlist screening across regulatory sources
- Adverse media screening across global sources
- Smart matching to reduce false positives
- Dynamic Risk Assessment and ongoing AML monitoring using KYC, KYB and AML data
How AML Teams Detect Structuring and Smurfing
AML teams use transaction monitoring, customer due diligence and pattern analysis to identify activity that may indicate structuring money laundering or smurfing.
By reviewing transactions across accounts, channels, locations and time periods, compliance professionals can detect suspicious patterns that individual transactions may not reveal. This broader approach supports effective smurfing AML controls and helps investigators identify potential structuring red flags.
Aggregate transactions
AML transaction monitoring should evaluate related activity collectively, not just one payment at a time. By reviewing rolling time periods, customer-level totals, linked accounts, branches, payment channels and counterparties, compliance teams can identify structured transactions that appear ordinary individually but reveal a suspicious pattern when viewed together. This is particularly important when investigating potential structuring money laundering activity.
Establish normal customer behaviour
Effective structuring detection starts with understanding what normal activity looks like for each customer. Transaction data should be assessed alongside CDD and KYC information, including occupation, industry, expected transaction volume, source of funds, geography, customer type and historical activity, so unusual behaviour can be distinguished from legitimate business activity. This context helps compliance teams assess structuring red flags without treating every unusual transaction as evidence of financial crime.
Detect unusual velocity
Transaction velocity can reveal potential smurfing or layering activity. AML teams should monitor sudden increases in deposits, withdrawals, transfers or account activity, particularly where funds move rapidly between accounts or are received from multiple parties before being transferred elsewhere.
These patterns can be relevant to smurfing AML investigations and broader structuring money laundering risk assessments.
Link customers and counterparties
Network analysis helps uncover relationships that may remain hidden when accounts are reviewed separately. Shared addresses, common beneficial owners, connected devices, repeated beneficiaries and recurring counterparties can indicate coordinated activity across customers, accounts or entities and support broader AML risk assessment.
Such connections may also strengthen the significance of individual structuring red flags when viewed across a wider network.
Uncover Hidden Business Connections
Investigate threshold-adjacent activity
Transactions just below an applicable reporting or control threshold may warrant review when combined with other red flags, such as repeated deposits, multiple branches or linked accounts.
However, being below a threshold is not itself evidence of structuring; investigators must consider the customer's profile, transaction purpose and overall activity pattern. A threshold-adjacent transaction should therefore be treated as one possible structuring red flag, not as conclusive proof of structuring money laundering.
Combine rules with behavioural analysis
Rule-based transaction monitoring can identify known AML typologies, such as repeated cash deposits or rapid transfers, while behavioural and anomaly detection can highlight activity that deviates from a customer's normal pattern.
Combining both approaches improves structuring detection without relying solely on fixed thresholds. It can also help smurfing AML programmes identify distributed activity across multiple accounts, people or channels.
Escalate suspicious patterns
An AML alert should prompt a proportionate investigation, not an automatic conclusion that money laundering has occurred. Depending on the jurisdiction and risk assessment, escalation may include enhanced review, EDD, requests for supporting information, source-of-funds checks, internal compliance escalation, SAR/STR consideration and continued ongoing monitoring.
Where several structuring red flags appear together, investigators should document the rationale for escalation and assess whether the activity may indicate structuring money laundering.
Structuring Laws and AML Requirements
Structuring laws prohibit deliberately dividing transactions to evade reporting, recordkeeping, or other anti-money laundering controls.
United States
Under the Bank Secrecy Act (BSA), deliberately structuring transactions to evade reporting or other AML requirements is illegal, even when individual transactions appear routine. FinCEN treats structuring as a standalone violation, so AML teams should assess repeated deposits, withdrawals, or monetary-instrument purchases in context, not just a single threshold-adjacent transaction. Repeated activity, multiple locations and linked transactions may form important structuring red flags.
United Kingdom
UK anti-money laundering guidance recognises splitting linked transactions to avoid AML controls as a financial crime risk. This is often called smurfing, especially when multiple people, accounts, or payment channels are used. Firms should consider transaction purpose, customer risk, source of funds, counterparties, and unusual patterns when investigating potential structuring or smurfing. These factors can help strengthen smurfing AML monitoring and identify possible structuring money laundering activity.
Australia
AUSTRAC describes structuring as dividing transactions to avoid threshold reporting, which is an offence under Australia's AML/CTF framework. Potential indicators include repeated cash deposits, activity across different branches, third-party transactions, or payments just below reporting thresholds. However, below-threshold activity is not automatically suspicious and must be assessed in context. Compliance teams should evaluate whether these are isolated events or part of a broader pattern of structuring red flags.
Global perspective
FATF Recommendations provide the international foundation for AML and counter-terrorist financing frameworks, but laws, reporting thresholds, and supervisory requirements vary by country. Businesses should follow local guidance and apply risk-based monitoring, KYC, due diligence, and escalation procedures. The FATF Recommendations were most recently amended in June 2026.
Binderr: KYC, KYB, AML and Risk Assessment
Structuring and smurfing show why AML teams need connected compliance checks, including customer verification, UBO identification, screening, risk assessment and ongoing monitoring.
See how Binderr supports the wider compliance lifecycle;
- KYC: Verify individuals with document, biometric and liveness checks
- KYB: Verify companies using global registry data
- UBO Identification: Identify individuals who own or control a business
- AML Screening: Screen against sanctions, PEPs, watchlists and adverse media
- Dynamic Risk Assessment: Score risk using compliance data
- Ongoing Monitoring: Get alerts when customer or entity risk changes
Bottom Line
Structuring and smurfing show why AML monitoring must look beyond individual transactions. A small deposit or transfer may seem routine, but repeated threshold-adjacent activity, linked accounts, unusual counterparties or rapid fund movement can reveal a suspicious pattern associated with structuring money laundering.
Combining transaction monitoring with KYC/CDD and customer risk assessment helps compliance teams identify potential structuring red flags without treating every unusual transaction as proof of financial crime. Effective smurfing AML controls also help teams connect activity across customers, accounts, channels and time.
Bring KYC, KYB, AML screening and customer risk management together with Binderr Services. Give your team the context needed to investigate structuring, smurfing and other AML risks more efficiently.
